Hostnames |
bsmmag.com www.bsmmag.com fsmmag.com www.fsmmag.com oticommunications.com www.oticommunications.com otintl.com www.otintl.com 74.191.202.64.host.secureserver.net ip-64-202-191-74.ip.secureserver.net |
Domains | bsmmag.com fsmmag.com oticommunications.com otintl.com secureserver.net |
Country | United States |
City | Gilbert |
Organization | GoDaddy.com, LLC |
ISP | GoDaddy.com, LLC |
ASN | AS398101 |
Operating System | Windows |
-370734890 | 2025-01-15T04:24:37.76711021 / tcp
220 Microsoft FTP Service 530 User cannot log in. 214-The following commands are recognized (* ==>'s unimplemented). ABOR ACCT ADAT * ALLO APPE AUTH CCC CDUP CWD DELE ENC * EPRT EPSV FEAT HELP HOST LANG LIST MDTM MIC * MKD MODE NLST NOOP OPTS PASS PASV PBSZ PORT PROT PWD QUIT REIN REST RETR RMD RNFR RNTO SITE SIZE SMNT STAT STOR STOU STRU SYST TYPE USER XCUP XCWD XMKD XPWD XRMD 214 HELP command successful. 211-Extended features supported: LANG EN* UTF8 AUTH TLS;TLS-C;SSL;TLS-P; PBSZ PROT C;P; CCC HOST SIZE MDTM REST STREAM 211 END
Certificate: Data: Version: 3 (0x2) Serial Number: 848015 (0xcf08f) Signature Algorithm: sha256WithRSAEncryption Issuer: C=CH, L=Schaffhausen, O=Plesk, CN=Plesk/emailAddress=info@plesk.com Validity Not Before: Mar 29 23:01:20 2019 GMT Not After : Mar 28 23:01:20 2020 GMT Subject: C=CH, L=Schaffhausen, O=Plesk, CN=Plesk/emailAddress=info@plesk.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:d2:d5:aa:c8:7f:0c:f1:f6:68:f5:90:0b:eb:a8: 61:be:a9:cd:9f:e4:28:2e:c1:87:3f:90:52:8d:2e: 8b:77:b3:07:44:8e:7e:0a:f4:3d:36:8c:f1:d7:2b: 78:31:e3:e2:51:3f:43:92:14:f4:2a:ec:c2:a8:0a: cd:3c:56:72:8b:d7:0f:b4:35:9a:6b:4a:11:16:56: 17:b3:8b:3b:c5:29:04:fa:3e:87:7b:69:6b:5d:70: 22:86:d4:29:fd:0f:ef:8d:41:17:db:a3:d9:ea:26: 3a:bf:6b:60:b2:9e:fc:98:05:f7:eb:68:99:68:5a: ad:9b:52:07:f0:1c:5d:26:3d:54:76:20:92:a9:49: 40:f0:c1:de:3e:58:dd:83:c7:78:56:ba:ea:72:11: d0:6d:2e:96:6a:cd:36:8f:8d:33:ea:2b:d4:e8:da: b9:1c:5c:dd:a8:fa:81:d2:77:90:8d:86:e7:c3:ab: 02:53:6c:ce:b6:c1:09:64:ab:f1:d0:c6:19:0d:83: 2d:1c:a8:26:6f:12:2e:06:39:7b:91:b6:b9:f1:97: 6b:12:3b:81:0f:2c:3b:ab:76:7c:3d:cd:ce:a0:8c: 03:70:1c:f6:31:58:89:ad:f8:60:3c:5e:fc:7b:19: 60:7f:2a:46:0a:3f:6b:1f:02:07:dc:4d:12:4a:26: c2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Subject Key Identifier: 7C:12:70:44:C3:46:4D:28:6B:95:C5:56:FD:02:5D:01:6B:6F:A2:C8 X509v3 Authority Key Identifier: keyid:7C:12:70:44:C3:46:4D:28:6B:95:C5:56:FD:02:5D:01:6B:6F:A2:C8 DirName:/C=CH/L=Schaffhausen/O=Plesk/CN=Plesk/emailAddress=info@plesk.com serial:0C:F0:8F Signature Algorithm: sha256WithRSAEncryption Signature Value: 95:c6:ba:f2:5d:49:b9:72:7b:ef:29:24:45:3f:39:76:eb:3e: a7:3e:d9:37:fe:4e:32:a5:08:92:ea:f5:d9:d2:90:80:84:95: 5d:5f:8e:e3:e3:d2:81:5b:94:1e:9e:5c:fc:92:29:e6:d6:f2: bc:80:2b:26:fb:5a:75:cd:c9:95:90:1d:59:b6:37:2e:c8:1d: ca:1f:1a:75:a1:2b:23:f9:e1:74:d0:0a:2c:1a:cb:34:90:54: 98:3c:a2:49:3c:d3:08:e3:bb:4f:0f:35:3b:2b:ac:57:d4:84: b4:56:a3:8c:7e:f5:13:b9:3e:6a:d4:b9:15:a5:51:d3:08:cd: a6:89:4a:b8:6d:32:1b:08:b3:9d:7c:1a:6d:8a:d2:c6:62:34: d7:e0:8b:97:f8:31:2a:d2:d8:8b:92:6f:67:5a:09:41:4e:17: 2a:d3:bf:54:07:1a:0c:07:e7:eb:fd:35:5f:05:25:84:27:79: e5:f1:71:5c:58:43:0b:18:f7:c2:bf:b2:fe:ce:e9:59:86:76: 39:a8:6b:0c:89:f3:95:a3:9c:42:6b:17:95:23:88:42:45:a1: 3e:be:17:97:60:01:fd:67:eb:9e:a3:e0:b8:7d:d2:b5:1d:0d: 4b:54:b7:62:78:61:26:86:cb:7d:75:05:e1:e1:2a:1f:cf:1f: 60:cf:bf:a7
1764567000 | 2025-01-07T00:56:49.78185425 / tcp
220 S64-202-191-74.home ESMTP MailEnable Service, Version: 10.49-- ready at 01/06/25 17:56:47 250-home [224.142.19.19], this server offers 4 extensions 250-AUTH LOGIN 250-SIZE 40960000 250-HELP 250 AUTH=LOGIN
42561019 | 2025-01-13T08:52:44.13364080 / tcp
HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=UTF-8 Location: https://64.202.191.74/ Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Mon, 13 Jan 2025 08:52:44 GMT Content-Length: 145
-471102630 | 2025-01-12T16:44:59.726557110 / tcp
+OK Welcome to MailEnable POP3 Server +OK Capability list follows TOP USER UIDL .
836201892 | 2025-01-10T18:15:13.960501135 / tcp
Microsoft RPC Endpoint Mapper d95afe70-a6d5-4259-822e-2c84da1ddb0d version: v1.0 protocol: [MS-RSP]: Remote Shutdown Protocol provider: wininit.exe ncacn_ip_tcp: 64.202.191.74:49664 ncalrpc: WindowsShutdown ncacn_np: \\S64-202-191-74\PIPE\InitShutdown ncalrpc: WMsgKRpc06BEB0 76f226c3-ec14-4325-8a99-6a46348418af version: v1.0 provider: winlogon.exe ncalrpc: WindowsShutdown ncacn_np: \\S64-202-191-74\PIPE\InitShutdown ncalrpc: WMsgKRpc06BEB0 ncalrpc: WMsgKRpc07A841 9b008953-f195-4bf9-bde0-4471971e58ed version: v1.0 ncalrpc: LRPC-1cfe1e3ad14fb6be08 ncalrpc: dabrpc ncalrpc: csebpub ncalrpc: LRPC-584c995e5e66c72705 ncalrpc: LRPC-04bb982cb7e34abf40 ncalrpc: OLE3988D6F682A8F2D94B02945F13CB ncalrpc: LRPC-77973b7846a37ac79c ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo d09bdeb5-6171-4a34-bfe2-06fa82652568 version: v1.0 ncalrpc: csebpub ncalrpc: LRPC-584c995e5e66c72705 ncalrpc: LRPC-04bb982cb7e34abf40 ncalrpc: OLE3988D6F682A8F2D94B02945F13CB ncalrpc: LRPC-77973b7846a37ac79c ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-04bb982cb7e34abf40 ncalrpc: OLE3988D6F682A8F2D94B02945F13CB ncalrpc: LRPC-77973b7846a37ac79c ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo ncalrpc: LRPC-81e4adb6e4ab9b0638 ncalrpc: LRPC-374ceb1a014b0dc28d 697dcda9-3ba9-4eb2-9247-e11f1901b0d2 version: v1.0 ncalrpc: LRPC-584c995e5e66c72705 ncalrpc: LRPC-04bb982cb7e34abf40 ncalrpc: OLE3988D6F682A8F2D94B02945F13CB ncalrpc: LRPC-77973b7846a37ac79c ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo 857fb1be-084f-4fb5-b59c-4b2c4be5f0cf version: v1.0 ncalrpc: LRPC-77973b7846a37ac79c ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo b8cadbaf-e84b-46b9-84f2-6f71c03f9e55 version: v1.0 ncalrpc: LRPC-77973b7846a37ac79c ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo 20c40295-8dba-48e6-aebf-3e78ef3bb144 version: v1.0 ncalrpc: LRPC-77973b7846a37ac79c ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo 2513bcbe-6cd4-4348-855e-7efb3c336dd3 version: v1.0 ncalrpc: LRPC-77973b7846a37ac79c ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo 88abcbc3-34ea-76ae-8215-767520655a23 version: v0.0 ncalrpc: LRPC-77973b7846a37ac79c ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo 76c217bc-c8b4-4201-a745-373ad9032b1a version: v1.0 ncalrpc: LRPC-77973b7846a37ac79c ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo 55e6b932-1979-45d6-90c5-7f6270724112 version: v1.0 ncalrpc: LRPC-77973b7846a37ac79c ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo 4dace966-a243-4450-ae3f-9b7bcb5315b8 version: v1.0 ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo 1832bcf6-cab8-41d4-85d2-c9410764f75a version: v1.0 ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo c521facf-09a9-42c5-b155-72388595cbf0 version: v0.0 ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo 2c7fd9ce-e706-4b40-b412-953107ef9bb0 version: v0.0 ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo 0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e version: v1.0 ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo c605f9fb-f0a3-4e2a-a073-73560f8d9e3e version: v1.0 ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo 1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 version: v1.0 ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo 8bfc3be1-6def-4e2d-af74-7c47cd0ade4a version: v1.0 ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo 2d98a740-581d-41b9-aa0d-a88b9d5ce938 version: v1.0 ncacn_np: \\S64-202-191-74\pipe\LSM_API_service ncalrpc: LSMApi ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 version: v1.0 annotation: Impl friendly name provider: sysntfy.dll ncalrpc: LRPC-9c28b80de74837c61f ncalrpc: actkernel ncalrpc: umpo ncacn_ip_tcp: 64.202.191.74:49666 ncalrpc: LRPC-7a4c6d71ca4145522a ncalrpc: ubpmtaskhostchannel ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 5824833b-3c1a-4ad2-bdfd-c31d19e23ed2 version: v1.0 ncalrpc: actkernel ncalrpc: umpo bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760 version: v1.0 ncalrpc: actkernel ncalrpc: umpo 3b338d89-6cfa-44b8-847e-531531bc9992 version: v1.0 ncalrpc: actkernel ncalrpc: umpo 8782d3b9-ebbd-4644-a3d8-e8725381919b version: v1.0 ncalrpc: actkernel ncalrpc: umpo 085b0334-e454-4d91-9b8c-4134f9e793f3 version: v1.0 ncalrpc: actkernel ncalrpc: umpo 4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 version: v1.0 ncalrpc: actkernel ncalrpc: umpo 0767a036-0d22-48aa-ba69-b619480f38cb version: v1.0 annotation: PcaSvc provider: pcasvc.dll ncalrpc: LRPC-cdfa5364a886d1f17e ncalrpc: TSUMRPD_PRINT_DRV_LPC_API ncalrpc: OLEAF827CF18376A94180A1B40F4CA2 ncalrpc: LRPC-1de00ae5d926639224 ncalrpc: LRPC-81e4adb6e4ab9b0638 e40f7b57-7a25-4cd3-a135-7f7d3df9d16b version: v1.0 annotation: Network Connection Broker server endpoint ncalrpc: LRPC-cdfa5364a886d1f17e ncalrpc: TSUMRPD_PRINT_DRV_LPC_API ncalrpc: OLEAF827CF18376A94180A1B40F4CA2 ncalrpc: LRPC-1de00ae5d926639224 ncalrpc: LRPC-81e4adb6e4ab9b0638 880fd55e-43b9-11e0-b1a8-cf4edfd72085 version: v1.0 annotation: KAPI Service endpoint ncalrpc: LRPC-cdfa5364a886d1f17e ncalrpc: TSUMRPD_PRINT_DRV_LPC_API ncalrpc: OLEAF827CF18376A94180A1B40F4CA2 ncalrpc: LRPC-1de00ae5d926639224 ncalrpc: LRPC-81e4adb6e4ab9b0638 5222821f-d5e2-4885-84f1-5f6185a0ec41 version: v1.0 annotation: Network Connection Broker server endpoint for NCB Reset module ncalrpc: LRPC-1de00ae5d926639224 ncalrpc: LRPC-81e4adb6e4ab9b0638 2fb92682-6599-42dc-ae13-bd2ca89bd11c version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-41f0453ff2cd9f6d12 ncalrpc: LRPC-0a9c6377bd928ea1ef ncalrpc: LRPC-513511b21224284c8f f47433c3-3e9d-4157-aad4-83aa1f5c2d4c version: v1.0 annotation: Fw APIs ncalrpc: LRPC-41f0453ff2cd9f6d12 ncalrpc: LRPC-0a9c6377bd928ea1ef ncalrpc: LRPC-513511b21224284c8f 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 version: v1.0 annotation: Fw APIs provider: MPSSVC.dll ncalrpc: LRPC-41f0453ff2cd9f6d12 ncalrpc: LRPC-0a9c6377bd928ea1ef ncalrpc: LRPC-513511b21224284c8f dd490425-5325-4565-b774-7e27d6c09c24 version: v1.0 annotation: Base Firewall Engine API provider: BFE.DLL ncalrpc: LRPC-0a9c6377bd928ea1ef ncalrpc: LRPC-513511b21224284c8f df4df73a-c52d-4e3a-8003-8437fdf8302a version: v0.0 annotation: WM_WindowManagerRPC\Server ncalrpc: LRPC-513511b21224284c8f 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 version: v1.0 annotation: DHCP Client LRPC Endpoint provider: dhcpcsvc.dll ncalrpc: dhcpcsvc ncalrpc: dhcpcsvc6 ncacn_ip_tcp: 64.202.191.74:49665 ncacn_np: \\S64-202-191-74\pipe\eventlog ncalrpc: eventlog ncalrpc: LRPC-38b164850e410ffe8b ncalrpc: LRPC-85bfdf36d1ee286a02 ncalrpc: LRPC-374ceb1a014b0dc28d 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 version: v1.0 annotation: DHCPv6 Client LRPC Endpoint provider: dhcpcsvc6.dll ncalrpc: dhcpcsvc6 ncacn_ip_tcp: 64.202.191.74:49665 ncacn_np: \\S64-202-191-74\pipe\eventlog ncalrpc: eventlog ncalrpc: LRPC-38b164850e410ffe8b ncalrpc: LRPC-85bfdf36d1ee286a02 ncalrpc: LRPC-374ceb1a014b0dc28d f6beaff7-1e19-4fbb-9f8f-b89e2018337c version: v1.0 annotation: Event log TCPIP protocol: [MS-EVEN6]: EventLog Remoting Protocol provider: wevtsvc.dll ncacn_ip_tcp: 64.202.191.74:49665 ncacn_np: \\S64-202-191-74\pipe\eventlog ncalrpc: eventlog ncalrpc: LRPC-38b164850e410ffe8b ncalrpc: LRPC-85bfdf36d1ee286a02 ncalrpc: LRPC-374ceb1a014b0dc28d 30adc50c-5cbc-46ce-9a0e-91914789e23c version: v1.0 annotation: NRP server endpoint provider: nrpsrv.dll ncalrpc: LRPC-38b164850e410ffe8b ncalrpc: LRPC-85bfdf36d1ee286a02 ncalrpc: LRPC-374ceb1a014b0dc28d a500d4c6-0dd1-4543-bc0c-d5f93486eaf8 version: v1.0 ncalrpc: LRPC-85bfdf36d1ee286a02 ncalrpc: LRPC-374ceb1a014b0dc28d a398e520-d59a-4bdd-aa7a-3c1e0303a511 version: v1.0 annotation: IKE/Authip API provider: IKEEXT.DLL ncalrpc: LRPC-a1059ba20d13c17059 ncalrpc: DeviceSetupManager ncacn_np: \\S64-202-191-74\pipe\SessEnvPublicRpc ncalrpc: SessEnvPrivateRpc ncacn_ip_tcp: 64.202.191.74:49666 ncalrpc: LRPC-7a4c6d71ca4145522a ncalrpc: ubpmtaskhostchannel ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 c49a5a70-8a7f-4e70-ba16-1e8f1f193ef1 version: v1.0 annotation: Adh APIs ncalrpc: LRPC-a1059ba20d13c17059 ncalrpc: DeviceSetupManager ncacn_np: \\S64-202-191-74\pipe\SessEnvPublicRpc ncalrpc: SessEnvPrivateRpc ncacn_ip_tcp: 64.202.191.74:49666 ncalrpc: LRPC-7a4c6d71ca4145522a ncalrpc: ubpmtaskhostchannel ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 c36be077-e14b-4fe9-8abc-e856ef4f048b version: v1.0 annotation: Proxy Manager client server endpoint ncalrpc: LRPC-a1059ba20d13c17059 ncalrpc: DeviceSetupManager ncacn_np: \\S64-202-191-74\pipe\SessEnvPublicRpc ncalrpc: SessEnvPrivateRpc ncacn_ip_tcp: 64.202.191.74:49666 ncalrpc: LRPC-7a4c6d71ca4145522a ncalrpc: ubpmtaskhostchannel ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 2e6035b2-e8f1-41a7-a044-656b439c4c34 version: v1.0 annotation: Proxy Manager provider server endpoint ncalrpc: LRPC-a1059ba20d13c17059 ncalrpc: DeviceSetupManager ncacn_np: \\S64-202-191-74\pipe\SessEnvPublicRpc ncalrpc: SessEnvPrivateRpc ncacn_ip_tcp: 64.202.191.74:49666 ncalrpc: LRPC-7a4c6d71ca4145522a ncalrpc: ubpmtaskhostchannel ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 552d076a-cb29-4e44-8b6a-d15e59e2c0af version: v1.0 annotation: IP Transition Configuration endpoint provider: iphlpsvc.dll ncalrpc: LRPC-a1059ba20d13c17059 ncalrpc: DeviceSetupManager ncacn_np: \\S64-202-191-74\pipe\SessEnvPublicRpc ncalrpc: SessEnvPrivateRpc ncacn_ip_tcp: 64.202.191.74:49666 ncalrpc: LRPC-7a4c6d71ca4145522a ncalrpc: ubpmtaskhostchannel ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 0d3c7f20-1c8d-4654-a1b3-51563b298bda version: v1.0 annotation: UserMgrCli ncalrpc: LRPC-a1059ba20d13c17059 ncalrpc: DeviceSetupManager ncacn_np: \\S64-202-191-74\pipe\SessEnvPublicRpc ncalrpc: SessEnvPrivateRpc ncacn_ip_tcp: 64.202.191.74:49666 ncalrpc: LRPC-7a4c6d71ca4145522a ncalrpc: ubpmtaskhostchannel ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 b18fbab6-56f8-4702-84e0-41053293a869 version: v1.0 annotation: UserMgrCli ncalrpc: LRPC-a1059ba20d13c17059 ncalrpc: DeviceSetupManager ncacn_np: \\S64-202-191-74\pipe\SessEnvPublicRpc ncalrpc: SessEnvPrivateRpc ncacn_ip_tcp: 64.202.191.74:49666 ncalrpc: LRPC-7a4c6d71ca4145522a ncalrpc: ubpmtaskhostchannel ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 29770a8f-829b-4158-90a2-78cd488501f7 version: v1.0 ncacn_np: \\S64-202-191-74\pipe\SessEnvPublicRpc ncalrpc: SessEnvPrivateRpc ncacn_ip_tcp: 64.202.191.74:49666 ncalrpc: LRPC-7a4c6d71ca4145522a ncalrpc: ubpmtaskhostchannel ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 3a9ef155-691d-4449-8d05-09ad57031823 version: v1.0 ncacn_ip_tcp: 64.202.191.74:49666 ncalrpc: LRPC-7a4c6d71ca4145522a ncalrpc: ubpmtaskhostchannel ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 86d35949-83c9-4044-b424-db363231fd0c version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: schedsvc.dll ncacn_ip_tcp: 64.202.191.74:49666 ncalrpc: LRPC-7a4c6d71ca4145522a ncalrpc: ubpmtaskhostchannel ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 33d84484-3626-47ee-8c6f-e7e98b113be1 version: v2.0 ncalrpc: LRPC-7a4c6d71ca4145522a ncalrpc: ubpmtaskhostchannel ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 378e52b0-c0a9-11cf-822d-00aa0051e40f version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 1ff70682-0a51-30e8-076d-740be8cee98b version: v1.0 protocol: [MS-TSCH]: Task Scheduler Service Remoting Protocol provider: taskcomp.dll ncacn_np: \\S64-202-191-74\PIPE\atsvc ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 version: v1.0 provider: schedsvc.dll ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 30b044a5-a225-43f0-b3a4-e060df91f9c1 version: v1.0 provider: certprop.dll ncalrpc: LRPC-6b07f64e2605ed635e ncalrpc: senssvc ncalrpc: IUserProfile2 ncalrpc: OLEAD5DDA9465A5967EF87F50BF3515 2eb08e3e-639f-4fba-97b1-14f878961076 version: v1.0 annotation: Group Policy RPC Interface provider: gpsvc.dll ncalrpc: LRPC-511c639336fd114275 3473dd4d-2e88-4006-9cba-22570909dd10 version: v5.256 annotation: WinHttp Auto-Proxy Service ncacn_np: \\S64-202-191-74\PIPE\W32TIME_ALT ncalrpc: W32TIME_ALT ncalrpc: LRPC-0efae6a6b3cb144dc7 ncalrpc: OLE59CAC3D244CB2C546784D649ACD5 7ea70bcf-48af-4f6a-8968-6a440754d5fa version: v1.0 annotation: NSI server endpoint provider: nsisvc.dll ncalrpc: LRPC-0efae6a6b3cb144dc7 ncalrpc: OLE59CAC3D244CB2C546784D649ACD5 7f1343fe-50a9-4927-a778-0c5859517bac version: v1.0 annotation: DfsDs service ncacn_np: \\S64-202-191-74\PIPE\wkssvc ncalrpc: DNSResolver ncalrpc: nlaplg ncalrpc: LRPC-7ee975309819ba2498 eb081a0d-10ee-478a-a1dd-50995283e7a8 version: v3.0 annotation: Witness Client Test Interface ncalrpc: LRPC-7ee975309819ba2498 f2c9b409-c1c9-4100-8639-d8ab1486694a version: v1.0 annotation: Witness Client Upcall Server ncalrpc: LRPC-7ee975309819ba2498 7aeb6705-3ae6-471a-882d-f39c109edc12 version: v1.0 ncalrpc: LRPC-b1e138003fa14468c0 e7f76134-9ef5-4949-a2d6-3368cc0988f3 version: v1.0 ncalrpc: LRPC-b1e138003fa14468c0 b3781086-6a54-489b-91c8-51d067172ab7 version: v1.0 ncalrpc: LRPC-b1e138003fa14468c0 b37f900a-eae4-4304-a2ab-12bb668c0188 version: v1.0 ncalrpc: LRPC-b1e138003fa14468c0 abfb6ca3-0c5e-4734-9285-0aee72fe8d1c version: v1.0 ncalrpc: LRPC-b1e138003fa14468c0 1a0d010f-1c33-432c-b0f5-8cf4e8053099 version: v1.0 annotation: IdSegSrv service ncalrpc: LRPC-7b297e28df16f13b6a 98716d03-89ac-44c7-bb8c-285824e51c4a version: v1.0 annotation: XactSrv service provider: srvsvc.dll ncalrpc: LRPC-7b297e28df16f13b6a e38f5360-8572-473e-b696-1b46873beeab version: v1.0 ncalrpc: LRPC-7333d83d2d4b08936c 4c9dbf19-d39e-4bb9-90ee-8f7179b20283 version: v1.0 ncalrpc: LRPC-7333d83d2d4b08936c 12345778-1234-abcd-ef00-0123456789ac version: v1.0 protocol: [MS-SAMR]: Security Account Manager (SAM) Remote Protocol provider: samsrv.dll ncacn_ip_tcp: 64.202.191.74:49674 ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\S64-202-191-74\pipe\lsass 51a227ae-825b-41f2-b4a9-1ac9557a1018 version: v1.0 annotation: Ngc Pop Key Service ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\S64-202-191-74\pipe\lsass 8fb74744-b2ff-4c00-be0d-9ef9a191fe1b version: v1.0 annotation: Ngc Pop Key Service ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\S64-202-191-74\pipe\lsass b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 version: v2.0 annotation: KeyIso ncalrpc: samss lpc ncalrpc: SidKey Local End Point ncalrpc: protected_storage ncalrpc: lsasspirpc ncalrpc: lsapolicylookup ncalrpc: LSA_EAS_ENDPOINT ncalrpc: LSA_IDPEXT_ENDPOINT ncalrpc: lsacap ncalrpc: LSARPC_ENDPOINT ncalrpc: securityevent ncalrpc: audit ncacn_np: \\S64-202-191-74\pipe\lsass 50abc2a4-574d-40b3-9d66-ee4fd5fba076 version: v5.0 protocol: [MS-DNSP]: Domain Name Service (DNS) Server Management provider: dns.exe ncacn_ip_tcp: 64.202.191.74:49667 367abb81-9844-35f1-ad32-98f038001003 version: v2.0 protocol: [MS-SCMR]: Service Control Manager Remote Protocol provider: services.exe ncacn_ip_tcp: 64.202.191.74:49669 f3f09ffd-fbcf-4291-944d-70ad6e0e73bb version: v1.0 ncalrpc: LRPC-21675e34d759abd954 906b0ce0-c70b-1067-b317-00dd010662da version: v1.0 protocol: [MS-CMPO]: MSDTC Connection Manager: provider: msdtcprx.dll ncalrpc: LRPC-33837a24f8451fb561 ncalrpc: LRPC-33837a24f8451fb561 ncalrpc: LRPC-33837a24f8451fb561 ncalrpc: LRPC-ed01f7c6da178de8c7 ncalrpc: OLE51D7843D073B32DDBFE72C3175EA 4b112204-0e19-11d3-b42b-0000f81feb9f version: v1.0 provider: ssdpsrv.dll ncalrpc: LRPC-c31400baa9af0f1132
311272634 | 2025-01-07T06:38:16.700754143 / tcp
* OK IMAP4rev1 server ready at 01/06/25 23:38:16 * CAPABILITY IMAP4rev1 IMAP4 AUTH=LOGIN AUTH=CRAM-MD5 IDLE CHILDREN UIDPLUS A001 OK CAPABILITY completed A002 BAD UNKNOWN Command A003 BAD UNKNOWN Command * BYE IMAP4rev1 server terminating connection A004 OK LOGOUT Initiated
1854899355 | 2025-01-16T01:55:24.657682443 / tcp
HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Tue, 02 Jan 2024 16:01:41 GMT Accept-Ranges: bytes ETag: "5d81c7f9943dda1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Powered-By-Plesk: PleskWin Date: Thu, 16 Jan 2025 01:55:24 GMT Content-Length: 12970
Certificate: Data: Version: 3 (0x2) Serial Number: 3064222015454788367 (0x2a864db0281d3b0f) Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2 Validity Not Before: Dec 2 14:52:42 2024 GMT Not After : Jan 3 14:52:42 2026 GMT Subject: CN=bsmmag.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:a3:a5:d6:eb:62:5a:c7:31:16:70:56:b6:3d:d9: 55:95:5a:21:69:5f:63:d2:d6:f1:3a:5a:f9:6f:a8: e1:9a:bf:02:e5:7f:4d:c7:b6:2b:82:ea:dd:60:a5: 3f:43:cc:7c:22:ff:4f:2a:f9:65:7e:22:a3:22:7f: 56:35:6e:b1:8b:9b:4e:a4:8e:97:1d:0b:9f:3f:25: 7e:06:0b:e4:26:3b:3e:95:e8:cb:75:9b:d7:a7:2e: 05:1e:33:51:30:5e:27:55:18:01:d0:09:ac:4a:40: 6c:d7:b1:88:9a:47:17:60:45:ce:52:51:9d:b4:e6: 2b:64:ac:91:bd:18:95:62:b6:65:47:f8:13:cc:5c: d1:3f:f7:6b:46:20:56:ec:63:db:7e:70:1c:31:56: b4:b8:7c:25:bd:49:28:d3:21:61:10:02:b0:60:2c: b2:29:45:58:72:58:65:ac:69:89:95:77:89:96:8a: e5:e3:0b:1e:d8:f5:b0:89:c1:4a:e1:fc:e1:1d:c5: b0:a4:84:f1:5c:39:63:ae:38:fa:24:f9:72:6e:4a: 09:62:60:94:38:5c:30:08:fd:c9:f8:1c:3a:66:ab: ed:31:dc:b3:c0:36:ef:f3:90:e8:46:d3:e8:05:d2: ef:fe:4e:6c:ac:06:80:fd:a4:2d:57:66:9c:6e:0e: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 CRL Distribution Points: Full Name: URI:http://crl.godaddy.com/gdig2s1-34287.crl X509v3 Certificate Policies: Policy: 2.16.840.1.114413.1.7.23.1 CPS: http://certificates.godaddy.com/repository/ Policy: 2.23.140.1.2.1 Authority Information Access: OCSP - URI:http://ocsp.godaddy.com/ CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt X509v3 Authority Key Identifier: 40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE X509v3 Subject Alternative Name: DNS:fsmmag.com, DNS:oticommunications.com, DNS:www.fsmmag.com, DNS:bsmmag.com, DNS:www.bsmmag.com, DNS:www.oticommunications.com, DNS:otintl.com, DNS:www.otintl.com X509v3 Subject Key Identifier: 87:D2:56:90:77:37:AF:0B:57:F5:76:01:2E:58:D3:03:B6:E8:05:4A CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90: DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21 Timestamp : Dec 2 14:52:42.704 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:36:5C:EF:92:6C:78:62:1C:4D:92:81:CA: EE:1F:6B:35:4E:A1:71:30:7D:B3:E0:22:BB:34:3E:21: 82:1D:AB:57:02:20:0D:6B:ED:98:C4:37:BB:88:9A:D9: 41:A1:D3:A3:CE:B6:39:6E:45:D2:64:60:BE:77:BE:94: 6D:D7:DC:79:72:60 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB: 4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0 Timestamp : Dec 2 14:52:42.970 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:62:E0:F0:F6:BD:26:29:F8:EB:DA:D8:74: DA:0C:BF:63:25:80:09:55:F9:80:75:7B:4F:53:E3:DB: 3A:76:27:8F:02:20:6D:D1:37:62:BE:04:98:73:07:19: 49:CA:96:99:17:51:78:26:E3:57:A1:F5:1B:34:C1:6B: 4E:71:D3:3E:AE:C3 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E: F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7 Timestamp : Dec 2 14:52:43.300 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:E2:F5:6D:D1:A2:23:59:DE:9F:59:2E: 60:13:40:48:4E:FE:D9:93:E9:61:71:55:69:18:D6:B4: 40:7A:F1:D3:BA:02:21:00:EF:1C:27:2A:4A:FD:5D:31: D6:2F:19:10:6E:95:82:31:0A:58:45:7F:29:64:50:2E: 0F:6C:59:06:F6:0F:DF:73 Signature Algorithm: sha256WithRSAEncryption Signature Value: 8f:0c:97:ac:09:68:f2:4a:d7:d7:7b:2a:59:20:67:d6:4b:7c: 84:1f:69:38:e9:67:f5:da:85:2d:18:30:fa:b8:e8:0f:fb:66: 6d:0c:47:3b:7d:c1:40:1a:5a:42:52:e5:b5:fd:90:b0:7d:5a: 17:af:97:ab:67:e5:ee:1c:41:2b:c4:68:66:fb:af:23:37:c8: fa:4a:d4:09:e1:95:46:2f:bd:2c:b3:00:32:ac:56:15:9f:92: da:80:4b:cd:9f:a3:5a:4a:fd:e2:3d:cd:c9:af:85:1a:ef:77: c6:ba:e5:44:99:45:b9:b0:73:12:93:2a:37:c1:5f:cb:2a:31: fd:d4:52:a4:99:2e:c2:fe:8c:39:4f:25:ab:c5:d5:2b:b9:cb: 28:fe:98:29:f1:e3:b6:01:5b:78:bc:de:15:79:67:1f:e6:7d: a9:a0:e6:67:2e:9d:0c:84:1c:b6:c7:be:0d:2e:65:94:1f:8b: 62:65:09:7d:33:16:a7:dc:1e:cb:6c:f3:7e:d2:cd:b5:f1:ed: 60:70:fc:7f:a3:28:0f:c5:41:e8:f1:2b:0f:fe:7b:ca:02:18: 18:9b:75:7b:02:11:00:b3:0e:70:18:75:34:ee:47:49:0d:a9: db:1d:25:d0:76:f3:9d:23:0d:f9:d7:da:46:a8:32:f1:0b:4e: 1a:dd:de:46
304705049 | 2025-01-13T08:08:08.468547445 / tcp
SMB Status: Authentication: enabled SMB Version: 1 OS: Windows Server 2016 Standard 14393 Software: Windows Server 2016 Standard 6.3 Capabilities: extended-security, infolevel-passthru, large-files, large-readx, large-writex, level2-oplocks, lock-and-read, lwio, nt-find, nt-smb, nt-status, rpc-remote-api, unicode
1860838998 | 2025-01-08T00:42:46.4965093389 / tcp
Remote Desktop Protocol \x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x02\x00\x00\x00 Remote Desktop Protocol NTLM Info: OS: Windows 10 (version 1607)/Windows Server 2016 (version 1607) OS Build: 10.0.14393 Target Name: S64-202-191-74 NetBIOS Domain Name: S64-202-191-74 NetBIOS Computer Name: S64-202-191-74 DNS Domain Name: s64-202-191-74 FQDN: s64-202-191-74 - Otheruser SES Password Sign-in options
Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4f:87:45:91:df:a8:a9:47:6e:81:64:ec:a4:c2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=s64-202-191-74 Validity Not Before: Aug 9 16:34:00 2024 GMT Not After : Feb 8 16:34:00 2025 GMT Subject: CN=s64-202-191-74 Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:aa:3e:89:90:26:b0:ee:2d:d7:90:ed:49:02:5c: be:37:a8:71:21:3d:2e:30:57:f3:00:b0:71:34:ca: 5d:7f:28:36:cb:29:a9:70:78:5a:6d:37:fa:24:0c: 09:e0:23:2c:8f:66:a7:ab:4b:db:5e:03:fa:d8:6e: 7e:56:57:6d:56:20:2d:63:b8:ad:f3:a8:b6:e8:b3: 42:9b:77:03:a4:db:47:c1:c0:3d:bf:19:d7:11:db: 23:21:79:9d:50:ca:ba:b5:5f:47:1d:c8:08:21:4e: 4c:37:3d:04:01:76:0c:96:56:ba:4f:02:89:4e:67: 25:ae:5d:ed:4c:63:da:d8:15:aa:08:a3:01:60:83: 52:cb:cb:e2:90:e3:1a:00:76:8f:55:a1:4f:1f:be: bc:d5:fc:13:10:ba:68:f4:3a:8a:ad:57:03:06:f4: 82:be:e5:db:e0:d7:58:c2:0f:90:c8:ff:af:93:01: ab:da:7f:4f:80:a7:87:73:cf:02:e0:a6:44:63:55: 0f:2d:63:ca:42:51:e6:15:59:51:cb:db:40:91:0d: a5:59:97:f2:da:5b:d4:db:38:cc:20:70:d7:7c:44: a5:86:9b:c3:05:6f:f5:8e:64:f4:cb:42:3a:49:a8: 23:c8:ee:b8:bc:b7:de:f1:be:e9:7d:9d:56:ec:7b: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Key Usage: Key Encipherment, Data Encipherment Signature Algorithm: sha256WithRSAEncryption Signature Value: 35:55:9d:a2:0c:96:0a:4d:6b:da:01:46:e5:4a:67:1b:e2:15: 7a:c3:70:11:fa:57:6d:ec:22:a5:87:71:f7:2a:25:a2:ec:5d: 0b:84:77:f6:c4:68:57:84:de:76:3e:fc:81:9e:f4:fc:ea:79: c3:52:5b:67:38:e6:5a:a1:4e:63:81:ea:ee:15:4a:d2:72:db: 30:a6:3c:23:bf:e8:38:e5:ad:f9:7c:6e:87:51:ab:69:da:3e: 2a:50:77:32:a7:46:65:5b:43:8e:fe:14:aa:f3:31:fa:46:8a: 76:2e:f0:27:d7:e4:7b:b5:83:a2:87:f5:19:76:0f:3e:33:ff: 58:4c:6e:03:0e:81:69:e1:a2:0d:09:54:7f:f5:d2:9d:12:06: 02:7a:32:96:f1:e8:46:9c:d5:a7:cb:ae:75:78:29:cd:c0:10: 49:68:96:91:7b:c7:3d:1b:f8:b9:dc:99:fc:53:02:1d:bd:cd: ce:60:ef:dc:7e:f1:a8:15:f3:68:c9:af:1e:f0:a3:57:d1:7e: 2a:7b:02:95:51:30:34:04:ee:9d:2b:ed:31:9f:7f:db:33:34: 47:a1:7e:35:77:92:60:1c:5b:13:0f:06:97:48:67:df:c5:a3: 02:20:b6:54:4a:dd:b8:d4:30:b7:03:33:f1:35:da:db:43:2e: fb:ce:40:0b
245961192 | 2025-01-11T20:52:10.6190908443 / tcp
HTTP/1.1 200 OK Cache-Control: no-store, no-cache, must-revalidate,post-check=0, pre-check=0 Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Sat, 11 Jan 2025 20:52:10 GMT Server: Microsoft-IIS/10.0 P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Set-Cookie: plesk-ext-social-login-jwt-session=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJwbGVzayIsImlhdCI6MTczNjYyODczMCwiZGF0YSI6eyJzdGF0ZS13ZWJhdXRobiI6IkRRcmlsa01pVmRBT0pmOXpoLyttME5xTzdhSEh1ZjNXSmF0aGVvYkp8cmVkaXJlY3QtcGxlc2s9aHR0cHMlM0ElMkYlMkY2NC4yMDIuMTkxLjc0JTJGbW9kdWxlcyUyRnNvY2lhbC1sb2dpbiUyRnB1YmxpYyUyRmxvZ2luLnBocCUzRnByb3ZpZGVyJTNEd2ViYXV0aG4iLCJzdGF0ZS1nb29nbGUiOiI1T2xoL3NBa2JNN21ERVBxRi91NlUwTDA0bVlGSzZoTXJWVnJTVk9SfHJlZGlyZWN0LXBsZXNrPWh0dHBzJTNBJTJGJTJGNjQuMjAyLjE5MS43NCUyRm1vZHVsZXMlMkZzb2NpYWwtbG9naW4lMkZwdWJsaWMlMkZsb2dpbi5waHAlM0Zwcm92aWRlciUzRGdvb2dsZSIsInN0YXRlLWdpdGh1YiI6IkNVanh1dTI2TkxPa0V0ZFVUOUEvNXhSaFNlQ0RLWmk1enF3TVlZZHl8cmVkaXJlY3QtcGxlc2s9aHR0cHMlM0ElMkYlMkY2NC4yMDIuMTkxLjc0JTJGbW9kdWxlcyUyRnNvY2lhbC1sb2dpbiUyRnB1YmxpYyUyRmxvZ2luLnBocCUzRnByb3ZpZGVyJTNEZ2l0aHViIiwic3RhdGUtZmFjZWJvb2siOiIyL256bnM2YldDellJMkgrQjUzc1ZncFlPV0QydUpzb2pwOEVwWmpmfHJlZGlyZWN0LXBsZXNrPWh0dHBzJTNBJTJGJTJGNjQuMjAyLjE5MS43NCUyRm1vZHVsZXMlMkZzb2NpYWwtbG9naW4lMkZwdWJsaWMlMkZsb2dpbi5waHAlM0Zwcm92aWRlciUzRGZhY2Vib29rIn19.UiH5BybzH38Z3L7egOLLZMR8iCxUmvyGKtlsVLYhL48; path=/; secure; HttpOnly X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Date: Sat, 11 Jan 2025 20:52:10 GMT
Certificate: Data: Version: 3 (0x2) Serial Number: 03:16:63:6f:c9:59:32:04:2e:b7:56:43:eb:1a:c0:d6:e4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Let's Encrypt, CN=R11 Validity Not Before: Dec 10 15:37:36 2024 GMT Not After : Mar 10 15:37:35 2025 GMT Subject: CN=74.191.202.64.host.secureserver.net Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b0:f5:ed:59:55:91:2b:8b:86:2f:22:87:4e:6d: d5:8b:f3:0d:df:f5:38:13:9a:e3:c2:94:fb:26:97: 1f:4a:2a:c4:d4:b8:cd:4f:0e:eb:6f:53:95:a8:47: 0c:03:43:95:3b:d1:07:5d:fe:fb:fa:b2:fc:a4:48: cb:b0:86:0f:e1:6f:e8:5c:ed:36:1a:19:c1:34:d4: aa:09:75:6d:b5:79:b5:e6:30:d2:19:98:c3:09:ff: 8c:e8:f8:ce:3c:f0:61:86:a0:01:86:56:90:57:0a: ad:a5:a5:9e:c0:a0:6d:ea:4c:64:ab:b2:05:9f:82: 9c:5c:a4:5c:91:7b:8d:5b:f0:e7:b3:f2:e0:23:92: 4d:53:9e:c4:69:f2:34:f9:34:3d:ee:7e:e6:43:ee: f1:db:6f:ce:1e:b2:a1:ed:f0:56:e2:70:48:5c:0f: d8:ca:6d:b9:05:c9:8a:94:52:59:a9:cc:d6:47:55: e5:5e:c5:35:37:c3:9e:5e:9e:81:56:0e:55:df:ed: 1d:e1:c1:d0:29:d1:72:e7:78:08:d6:52:d3:58:a3: 07:0d:71:fa:24:a2:1c:39:c5:1b:48:19:d0:e2:17: 2e:68:e6:0d:0f:51:52:82:f2:1e:e6:64:ba:98:ae: 42:76:1d:ed:bb:ad:a0:65:00:a8:28:ff:bc:9e:63: 6b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 81:10:BB:45:DB:BB:C9:9D:72:CA:8F:E4:60:FF:BD:D8:61:39:47:0A X509v3 Authority Key Identifier: C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9 Authority Information Access: OCSP - URI:http://r11.o.lencr.org CA Issuers - URI:http://r11.i.lencr.org/ X509v3 Subject Alternative Name: DNS:74.191.202.64.host.secureserver.net X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : DE:85:81:D7:50:24:7C:6B:CD:CB:AF:56:37:C5:E7:81: C6:4C:E4:6E:D6:17:63:9F:8F:34:A7:26:C9:E2:BD:37 Timestamp : Dec 10 16:36:06.651 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:31:A8:D4:E4:78:7A:5D:8B:96:D8:A6:26: CD:71:6A:68:33:E8:2F:C5:0D:A5:B8:83:5A:07:ED:29: 00:78:82:EA:02:21:00:EA:84:46:67:5B:74:15:99:38: 98:01:E3:D5:04:AF:75:F2:D6:4D:6C:B5:B5:60:32:72: 24:75:A3:3B:C2:90:7A Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4: 16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22 Timestamp : Dec 10 16:36:06.881 2024 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:5A:2F:EF:DD:A7:73:22:42:55:3E:7A:D1: 06:20:AF:F1:C6:24:C8:5D:BC:8F:86:45:97:59:FC:31: 9E:C6:5D:A4:02:20:0C:15:3E:F4:74:10:2D:0F:1C:1D: 83:E7:44:AC:D2:AC:9B:0E:64:33:42:AD:B4:BC:8D:C6: 07:E8:1B:D7:27:FC Signature Algorithm: sha256WithRSAEncryption Signature Value: 86:f3:1d:76:21:85:31:63:73:3e:c1:01:cc:d0:65:f0:27:da: 22:96:d1:45:16:4d:10:9c:25:7a:c9:8b:fc:d7:72:3a:fe:1f: 2e:8c:f3:00:eb:c6:0d:ba:a5:36:8c:a3:90:34:3c:49:f4:6c: 6f:78:0c:0d:61:e5:bb:65:7c:e3:04:9e:52:15:68:08:f2:4f: 05:08:73:5f:e8:f4:36:b9:3a:c2:a6:f5:57:f3:f7:98:63:06: 87:c7:52:a9:34:12:85:6b:73:58:6a:59:11:02:b4:79:3e:56: 72:60:d5:b8:9f:c9:d2:5b:f6:dd:61:d1:df:95:c9:68:d9:e6: 6c:c7:51:5d:17:cb:0a:4d:dc:35:98:d6:b5:ed:9d:b7:7a:ba: fc:9f:e7:8b:9b:e8:63:23:ff:10:f0:68:e0:9d:3e:e4:4f:d8: c6:9f:d2:fa:d6:2d:39:c5:16:80:9b:88:ed:a8:10:b3:a1:01: 05:b0:ae:1e:73:b9:5b:e2:58:81:35:11:30:a0:b9:be:47:57: c6:86:e8:b5:05:9e:af:0e:ca:fc:b1:2a:2e:b5:64:bb:a9:1a: a3:e2:74:c3:c3:63:01:85:90:a1:75:b5:4d:23:e1:d6:ab:61: 2e:04:9e:59:ca:39:06:38:84:03:62:f5:79:d7:46:5d:b4:8c: 3e:fc:05:05
220784546 | 2025-01-12T02:25:07.8871728880 / tcp
HTTP/1.1 303 See Other Cache-Control: no-store, no-cache, must-revalidate,post-check=0, pre-check=0 Pragma: no-cache Content-Type: text/html; charset=UTF-8 Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Sun, 12 Jan 2025 02:25:07 GMT Location: http://64.202.191.74/login.php Server: Microsoft-IIS/10.0 P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Date: Sun, 12 Jan 2025 02:25:07 GMT Content-Length: 0